This IP address has been reported a total of
22
times from
20 distinct
sources.
1.94.115.238 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
2026-06-14T03:28:57.760248+02:00 medusa sshd-session[385563]: Invalid user david from 1.94.115.238 p ...
show more2026-06-14T03:28:57.760248+02:00 medusa sshd-session[385563]: Invalid user david from 1.94.115.238 port 58340
...
show less
[sshd] | 2026-06-14T03:05:46.753554+02:00 xargana.tr sshd[1215736]: Failed password for invalid user ...
show more[sshd] | 2026-06-14T03:05:46.753554+02:00 xargana.tr sshd[1215736]: Failed password for invalid user premiere from 1.94.115.238 port 37256 ssh2
show less
2026-06-13T20:41:54.088787+00:00 ip-172-31-32-95 sshd[2105686]: Invalid user testuser from 1.94.115. ...
show more2026-06-13T20:41:54.088787+00:00 ip-172-31-32-95 sshd[2105686]: Invalid user testuser from 1.94.115.238 port 38776
2026-06-13T20:41:54.091581+00:00 ip-172-31-32-95 sshd[2105686]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.94.115.238
2026-06-13T20:41:56.670582+00:00 ip-172-31-32-95 sshd[2105686]: Failed password for invalid user testuser from 1.94.115.238 port 38776 ssh2
...
show less
[mirai-detector honeypot] Inbound attack against our honeypot on tcp/2222 (ssh).
Family fingerprint: ...
show more[mirai-detector honeypot] Inbound attack against our honeypot on tcp/2222 (ssh).
Family fingerprint: ssh-bruteforce
Commands captured:
$ SSH-2.0-libssh_0.9.6
show less
2026-06-13T21:48:31.422984+02:00 router01.peter-barth.de sshd-session[1369344]: Disconnected from in ...
show more2026-06-13T21:48:31.422984+02:00 router01.peter-barth.de sshd-session[1369344]: Disconnected from invalid user developer 1.94.115.238 port 51124 [preauth]
2026-06-13T21:50:34.305741+02:00 router01.peter-barth.de sshd-session[1369631]: Disconnected from authenticating user root 1.94.115.238 port 43208 [preauth]
2026-06-13T21:56:22.813317+02:00 router01.peter-barth.de sshd-session[1370479]: error: kex_exchange_identification: read: Connection reset by peer
2026-06-13T21:56:22.813364+02:00 router01.peter-barth.de sshd-session[1370479]: Connection reset by 1.94.115.238 port 60394
2026-06-13T21:58:15.782244+02:00 router01.peter-barth.de sshd-session[1370756]: Invalid user zhaomin from 1.94.115.238 port 33352
show less
(sshd) Failed SSH login from 1.94.115.238 (CN/China/ecs-1-94-115-238.compute.hwclouds-dns.com): 5 in ...
show more(sshd) Failed SSH login from 1.94.115.238 (CN/China/ecs-1-94-115-238.compute.hwclouds-dns.com): 5 in the last 3600 secs; Ports: *; Direction: 1; Trigger: LF_SSHD; Logs: Jun 13 14:01:09 14592 sshd[20805]: Invalid user tmp from 1.94.115.238 port 42114
Jun 13 14:01:11 14592 sshd[20805]: Failed password for invalid user tmp from 1.94.115.238 port 42114 ssh2
Jun 13 14:29:59 14592 sshd[3603]: Invalid user dummy from 1.94.115.238 port 46958
Jun 13 14:30:02 14592 sshd[3603]: Failed password for invalid user dummy from 1.94.115.238 port 46958 ssh2
Jun 13 14:48:12 14592 sshd[13591]: Invalid user developer from 1.94.115.238 port 43546
show less
2026-06-13T18:11:14.678663+02:00 admin sshd[665630]: Invalid user global from 1.94.115.238 port 3584 ...
show more2026-06-13T18:11:14.678663+02:00 admin sshd[665630]: Invalid user global from 1.94.115.238 port 35842
2026-06-13T18:11:14.680888+02:00 admin sshd[665630]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.94.115.238
2026-06-13T18:11:16.123635+02:00 admin sshd[665630]: Failed password for invalid user global from 1.94.115.238 port 35842 ssh2
2026-06-13T18:40:31.490296+02:00 admin sshd[676056]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.94.115.238 user=root
2026-06-13T18:40:33.804775+02:00 admin sshd[676056]: Failed password for root from 1.94.115.238 port 58728 ssh2
...
show less
2026-06-13T13:06:20.107013+00:00 ktj-nc sshd[269060]: Invalid user apt from 1.94.115.238 port 34982
...
show more2026-06-13T13:06:20.107013+00:00 ktj-nc sshd[269060]: Invalid user apt from 1.94.115.238 port 34982
2026-06-13T13:06:20.455253+00:00 ktj-nc sshd[269060]: Disconnected from invalid user apt 1.94.115.238 port 34982 [preauth]
...
show less
Cowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-13T06:52:28Z and 2026-06-1 ...
show moreCowrie Honeypot: 5 unauthorised SSH/Telnet login attempts between 2026-06-13T06:52:28Z and 2026-06-13T08:48:58Z
show less
Brute-Force
SSH
Showing 1 to
15
of 22 reports
Think this IP has been falsely reported? You may request to have the associated
reports reviewed and removed.
Request Takedown 🚩